# Caspio OAuth2.0 Authentication API

**URL:** <https://community.parabola.io/t/caspio-oauth2-0-authentication-api/290>\
**Category:** Ask a question\
**Tags:** Using-APIs\
**Created:** [April 5, 2020, 1:53pm UTC](https://community.parabola.io/t/caspio-oauth2-0-authentication-api/290 "2020-04-05T13:53:48Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tim\_Obrien](https://avatars.discourse-cdn.com/v4/letter/t/2bfe46/32.png) [@Tim\_Obrien](https://community.parabola.io/u/Tim_Obrien)\
**Post date:** [April 5, 2020, 1:53pm UTC](https://community.parabola.io/t/caspio-oauth2-0-authentication-api/290/1 "2020-04-05T13:53:48Z")

</div>

Hi,

I’m trying Authenticate OAuth2.0 import from Caspio (a low code database). I’ve been through the API tutorials on Parabola, but still haven’t had success.

Caspio’s API documentation:

> **[Authenticating REST API - Caspio Online Help](https://howto.caspio.com/web-services-api/rest-api/authenticating-rest/)**
>
> Use REST API to expand your capabilities while creating a low-code web app. If you don't know how to conduct REST API authentication this post will help you

On Parabola API Authorization, I’ve tried these settings:

**Authorization:**

Authorization Request URL: [https://myaccountid.caspio.com/oauth/token](https://myaccountid.caspio.com/oauth/token) (I couldn’t find anything in Caspio about Callback URL or a Return URI, so I used the token auth URL)

Edit URL Parameters: none

**Access Tokens:**  
_Access Tokens Request URL:_ https:///myaccountid.caspio.com/oauth/token

_Access Tokens Request Body:_  
grant\_type= client\_credentials (just typed in “client\_credentials”)  
client\_id = my client id number  
client\_secret = my client secret

**Refresh Tokens**  
_Refresh Tokens Request URL:_ https:///myaccountid.caspio.com/oauth/token  
_Refresh Token Method:_ POST  
_Refresh Token Request Body:_  
token\_type = bearer (just wrote “bearer”)  
Not not sure what to include in the body here.

Any help would be appreciated !

Thanks,  
Tim

---

<div class="post-metadata">

**Author:** ![brian](https://sea2.discourse-cdn.com/flex020/user_avatar/community.parabola.io/brian/32/11_2.png) [@brian](https://community.parabola.io/u/brian)\
**Post date:** [April 6, 2020, 7:20pm UTC](https://community.parabola.io/t/caspio-oauth2-0-authentication-api/290/2 "2020-04-06T19:20:11Z")

</div>

Hey Tim!

On that page, it says that they support the `client_credentials flow` of OAuth.

Right now, Parabola only supports the `Authorization Code` flow, so this isn’t going to work unfortunately!

Perhaps head to #feature-requests and request support for `client_credentials flow` in the OAuth process.

---

<div class="post-metadata">

**Author:** ![Tim\_Obrien](https://avatars.discourse-cdn.com/v4/letter/t/2bfe46/32.png) [@Tim\_Obrien](https://community.parabola.io/u/Tim_Obrien)\
**Post date:** [April 6, 2020, 8:50pm UTC](https://community.parabola.io/t/caspio-oauth2-0-authentication-api/290/3 "2020-04-06T20:50:27Z")

</div>

Hi Brian,

Thanks for looking through the documentation.  
That makes sense now.  
I’ll make a feature request as you suggested.

I was able to create a bearer token through Advanced Rest client, but it only has a life of 24 hours.

Tim